Open-source alternatives to V2ray

This project is a toolset for automated VPN installation, proxy server management, and server-side network throughput optimization. It provides a Shadowsocks proxy server manager used to deploy and configure proxy servers on virtual private servers. The system utilizes automated deployment scripts to handle the installation of encryption methods, ports, and passwords on remote servers. It includes a VPS network optimizer that activates BBR congestion control to reduce latency and increase throughput for high-bandwidth streaming. The software covers remote proxy configuration and client confi

This project is a set of administrative utilities for the installation, configuration, and lifecycle management of encrypted Shadowsocks proxy services on Linux systems. It functions as an automated installer and management tool to deploy proxy servers and secure internet traffic. The utility handles the end-to-end deployment process, including the configuration of ports, passwords, encryption methods, and obfuscation protocols. It provides the means to completely remove the server software and all associated configuration files from the system. The tool manages the operational state of the

ProxySU is a Windows desktop application that automates the deployment and management of proxy services on a Linux VPS. It combines single-click installation of multiple proxy protocols, including V2ray, Xray, Trojan, and Shadowsocks, with automatic SSL/TLS certificate provisioning and renewal through Let's Encrypt. The tool distinguishes itself by handling the full lifecycle of proxy server setup from a Windows environment, using SSH key-based authentication for secure, passwordless remote access. It also includes network optimization capabilities, such as activating the BBR TCP congestion c

Argosbx is an automated deployment script and multi-protocol proxy manager designed to expose local services to the internet using Cloudflare Argo tunnels. It functions as a tool for installing and configuring network tunneling kernels, including Sing-box and Xray, to create secure proxies and bypass network restrictions without the need for open firewall ports. The project distinguishes itself by providing a proxy subscription generator that creates formatted and password-protected URLs for syncing configurations across client devices. It also manages diverse tunneling protocols, such as VLE

This project is a service mesh platform designed to manage, secure, and observe service-to-service communication within Kubernetes clusters. It functions as a control plane that orchestrates transparent sidecar proxies, which intercept and manage network traffic to provide reliable connectivity for microservices. By automating the injection of these proxies, the platform ensures that infrastructure-level policies are applied consistently across all workloads without requiring manual configuration changes. The platform distinguishes itself through its focus on zero-trust security and cross-clu

This project provides a shell-based automation utility for deploying and managing OpenVPN servers on Linux hosts. It functions as an orchestration tool that handles the installation of networking software, the configuration of system-level routing rules, and the generation of cryptographic credentials required to establish secure, encrypted tunnels for remote network access. The tool distinguishes itself by automating the entire lifecycle of a private network gateway, including the management of peer identities and the distribution of standardized configuration profiles. It simplifies the set

This project is an orchestration system for deploying and managing encrypted proxy nodes across virtual and serverless hosting platforms. It provides a web-based management interface for configuring proxy servers and a dedicated manager for generating and synchronizing subscription links compatible with network client software. The system features a CDN tunneling orchestrator to mask origin server IP addresses using domain tunnels and CDN back-ends. It includes a Cloudflare WARP integrator to handle account configurations and route outbound traffic through specialized connections to manage ou

Xray-install is a set of command-line utilities and shell scripts designed to automate the deployment, maintenance, and removal of Xray core binaries on Linux systems. It functions as an installation script and service manager to establish network proxy and routing services. The tool manages the entire proxy server lifecycle, including the fetching of version-specific binaries and the configuration of systemd services and timers. It includes a dedicated routing data updater to refresh geolocation and routing files. The project covers system-level deployment primitives such as permission mana

This project is a collection of Linux server automation scripts designed to automate the installation and configuration of core server software. It provides specialized tools for deploying proxy servers, configuring DNS servers, managing container infrastructure, and optimizing the Linux kernel. The automation suite distinguishes itself by integrating geo-restriction bypass capabilities via proxy protocols and implementing advanced network tuning, such as enabling BBR congestion control to improve throughput and latency. It also features distribution-aware automation that detects CPU architec

ShadowsocksR is a Python-based implementation of a SOCKS5 proxy server designed to tunnel network traffic through encrypted connections. It functions as an encrypted network tunnel that obfuscates internet traffic to circumvent network restrictions and firewalls. The project includes security hardening features to protect the proxy server from unauthorized access, specifically by blocking IP addresses that attempt brute force credential attacks. The server manages bidirectional TCP and UDP traffic and can be executed as a background system daemon to maintain persistent connectivity. It suppo

Hiddify-Manager is a VPN management panel and multi-protocol proxy server designed for internet censorship circumvention. It provides a central system for deploying and administering tunneling protocols to mask internet traffic and origin IP addresses. The project features a user subscription manager for distributing dynamic configuration links and a DNS privacy suite that implements DNS over HTTPS to prevent identity leaks. It integrates a CDN routing gateway to hide server locations and provides a web-based interface for managing multiple obfuscated connection methods. The platform covers

v2ray-wss is a Linux proxy deployment script and installer used to set up V2Ray proxy servers for secure network routing and traffic obfuscation. It functions as a multi-protocol proxy server and gateway, enabling the deployment of encrypted tunnels on Linux distributions. The project specifically provides a WebSocket proxy gateway that routes traffic through Nginx and WebSockets to mask proxy connections as standard web traffic. It supports both domain-based configurations for users with registered domains and domainless proxy setups for users without a dedicated domain. The system automate

fhs-install-v2ray is a shell script that automates the deployment of V2Ray, a network proxy tool, on Linux servers. It downloads precompiled binaries and geographic data from a release server, places them into standard Linux filesystem directories, and registers V2Ray as a persistent background service managed by systemd. The script is designed to be idempotent, meaning repeated runs do not overwrite custom configurations, and uninstallation removes all installed files and services completely. The tool distinguishes itself by enforcing a Filesystem Hierarchy Standard (FHS) layout, mapping bin

x-ui-yg is a web-based proxy panel and multi-protocol manager used to deploy and manage network proxy protocols for bypassing internet censorship. It serves as a centralized administrator for secure network tunnels, providing a dashboard to obscure internet traffic and maintain user privacy. The project functions as a proxy subscription server, generating aggregated client subscription links and configuration files locally to remove reliance on third-party conversion tools. It also acts as a CDN proxy orchestrator, allowing the use of CDN domains and encryption to mask server identities and p

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add

This project is a censorship circumvention proxy client and cross-platform installer. It provides software designed to bypass internet filters, restrictive network firewalls, and the Great Firewall of China to enable access to blocked global websites. The software enables the download and installation of proxy and VPN clients across multiple desktop and mobile operating systems. These tools route traffic to bypass national firewalls and restrictive network filters. The project also covers network access acceleration to improve connection stability when accessing foreign servers and the manag

Sidekick is a command-line tool that provisions bare VPS servers, transfers Docker images, manages secrets, and orchestrates zero-downtime deployments across single or multiple server instances. It handles the full deployment pipeline from a local machine, building container images locally and transferring them directly to the server without requiring a remote container registry. The tool distinguishes itself through an integrated approach to security and automation. It encrypts environment variables locally using SOPS and Age keys, then decrypts them on the server at deploy time for runtime

Mihomo is a rule-based network proxy and traffic orchestrator designed to manage internet connections by intercepting and routing data packets. It functions as a background service that directs traffic through various proxy nodes based on user-defined policies, allowing for granular control over outbound network paths. The engine distinguishes itself through a sophisticated domain pattern matching system that utilizes wildcard and suffix-based algorithms to categorize web traffic. It supports complex configuration management by allowing users to define reusable data blocks and import external

This is a GitHub Action designed to automate the deployment of production assets to GitHub Pages or other external repositories. It functions as a CI/CD deployment tool and Git branch synchronizer that mirrors a local directory of build artifacts to a remote branch. The tool distinguishes itself by performing difference-based file pruning, which removes stale files from the destination branch that no longer exist in the source folder. It also supports cross-project workflows by allowing deployments to external repositories using personal access tokens or SSH keys. The action covers broad cap

This repository serves as a comprehensive collection of configuration templates, deployment scripts, and technical documentation for establishing secure, obfuscated network tunnels. It provides a centralized resource for users to implement advanced proxy services, focusing on the practical application of structured configuration schemas to manage complex traffic routing and protocol settings across diverse environments. The project distinguishes itself by offering a library of standardized templates for high-performance and censorship-resistant protocols. It covers a wide range of tunneling m

Headroom is an AI gateway proxy and token optimizer designed to reduce the cost and latency of large language model interactions. It functions as an intermediary that intercepts traffic between clients and providers to apply context compression, request routing, and format translation. The system differentiates itself through a Model Context Protocol server implementation that delivers compression and retrieval tools to compatible AI hosts. It employs a content-aware compression pipeline and tiered importance scoring to trim redundant data from logs and tool outputs while preserving essential

Clashfree is a network traffic routing platform designed to facilitate access to restricted online resources and digital services. It functions as a proxy configuration management tool that enables users to route internet traffic through encrypted tunnels, effectively bypassing regional access restrictions. The system provides a centralized way to manage network proxy connections and organize multiple routing profiles across various environments. The project distinguishes itself by providing automated subscription services that distribute daily updated proxy node lists and configuration files

Manifesto is an infrastructure-as-code project and a community-driven software fork. It serves as an open-source infrastructure tool designed to provide an alternative to proprietary automation software by maintaining a codebase under a permissive open-source license. The project focuses on open-source licensing advocacy, calling for foundational infrastructure tools to return to transparent and permissive licenses. This effort aims to ensure community transparency, prevent vendor lock-in, and maintain software longevity. The project's capabilities include managing a provider registry for in

Sing-box is a universal proxy platform and multi-protocol proxy core designed for routing traffic to bypass network restrictions. It functions as a network traffic controller and VPN tunneling orchestrator that implements diverse tunneling methods for secure and flexible data routing. The system utilizes a configuration-driven pipeline to define network flow and service behavior through declarative structures. It features a modular transport layer and protocol-agnostic tunneling to encapsulate network protocols, alongside rule-based packet routing and state-based connection tracking to manage

Streisand is an orchestration system for deploying multi-protocol tunneling services and traffic obfuscation tools designed to circumvent regional network restrictions. It functions as a deployment utility and manager for various VPN and proxy services on remote cloud servers. The system distinguishes itself through a network obfuscation toolkit that wraps traffic in layers to evade deep packet inspection and bandwidth throttling. It automates the setup of multiple protocols, including WireGuard, OpenVPN, Shadowsocks, OpenConnect, OpenSSH, and Tor bridges. The project also includes utilities

Reinstall is an automated operating system deployer and bare metal provisioning tool designed for virtual private servers and remote hardware. It functions as a remote disk imaging utility and OS management tool, enabling the deployment and reinstallation of Linux and Windows operating systems without requiring physical access to the machine. The project distinguishes itself by automating complex installation hurdles, such as bypassing hardware requirements for RAM, TPM, and SecureBoot. It manages critical low-level tasks including hardware-aware driver injection, raw disk image deployment wi

This project is a suite of administrative tools designed for automated operating system deployment and server infrastructure provisioning. It provides a framework for installing Linux and Windows distributions on remote hardware using network-streamed imaging and shell-based provisioning logic. The toolset includes specialized capabilities for network-streamed disk imaging and a TCP network tuning suite to optimize kernel parameters and congestion control. It also features a Windows group policy migrator for transferring and backing up operational settings between different computer instances